Quantum Hidden Subgroup Algorithms: The Devil Is in the 

Details 



Samuel J. Lomonaco, Jr. a and Louis H. Kauffman 6 
"Department of Computer Science and Electrical Engineering, University of Maryland 

Baltimore County, 1000 Hilltop Circle, Baltimore, Maryland 21250, USA 
^Department of Mathematics, Statistics, and Computer Science, University of Illinois 
at Chicago, 851 South Morgan Street, Chicago, Illinois 60607- 7045,USA 

ABSTRACT 

We conjecture that one of the main obstacles to creating new non-abelian quantum hidden subgroup algorithms 
is the correct choice of a transversal. 

1. INTRODUCTION 

New quantum algorithms are crucially needed to demonstrate that future quantum computers will be more than 
highly specialized machines, but instead highly versatile general purpose devices. Unfortunately, the current 
choice of quantum algorithms available for future quantum computing devices is surprisingly meager. With some 
minor (but important) exceptions, there are only three available classes of quantum algorithms, namely: 

1) Quantum hidden subgroup (QHS) algorithms, i.e., Shor/Simon-like algorithms, 

2) Amplitude amplification algorithms, i.e., Grover-like algorithms, and 

3) Quantum algorithms that simulate quantum systems on a quantum computer. 



In this paper, we focus on the development of new non-abelian QHS algorithms because of their tantalizing 
promise of exponential speedup over existing classical algorithms. For example, should there be a major 
breakthrough in non-abelian QHS algorithm development, then there is the enticing possibility that it might be 
possible to develop a polynomial-time QHS algorithm for the graph isomorphism problem. 

In spite of the efforts of many researchers, the number of new non-abelian QHS algorithms is very small and 
scattered. Why is it so difficult to generalize QHS algorithms to non-abelian groups? 

Before we can even guess at an answer to this question, we first need to define what we mean by a quantum 
hidden subgroup algorithm. 
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2. THE QUANTUM HIDDEN SUBGROUP ALGORITHM PARADIGM 



We begin by first denning the classical hidden subgroup problem: 

Hidden Subgroup Problem. Given a group G and a map / : G — ► H (not necessarily a morphism) of 
G into a group H, is it possible to find an invariant subgroup K of G such that the map / can be factored 
into the composition / = u o 7 of two maps 7 : G — ► G/K and t : G/K — ► H, where 7 denotes the 
natural epimorphism, and where 1 denotes an injection. The subgroup K is called a hidden subgroup. 

The quantum analog of the classical hidden problem is defined as follows: 

Generic Quantum Hidden Subgroup Problem. Let Kg and Ti H be Hilbert spaces with respective 
orthonormal bases 

{\g) : \g e G} and {\h) : h e H} . 
Assume that / : G — ► H is given as a unitary transformation 

U f :Ug®Hh — > H G ®H H 

\g)\h) — Isll/W" 1 ) 

Determine the hidden subgroup of / by making as few queries as possible to the blackbox Uf. 

We can now in turn define what we mean by a QHS algorithm that solves the above QHS problem: 

The generic quantum hidden SUBGROUP (QHS) algorithm is essentially (ignoring many subtleties) 
the following: 

• Step O. Initialize two registers |Left-Reg> in Ji G and |Right-Reg> in TL H to produce the initial state 
|-0o) = |0) |1), assuming additive notation for G, and multiplicative notation for H. 

• Step 1. Apply the Fourier transform Tg to the left register. 

• Step 2. Apply the unitary transformation Uf . (As mentioned by Shor, 17 there is no need to measure 
the right register.) 

• Step 3. Again apply the Fourier transform Tg to the left register. 

• Step 4. Measure the left register. 

• Step 5. Repeat Steps through 4 until enough measurements have been made to determine the hidden 
subgroup. 

Both Jozsa 5 and Kitaev 6 have noted that Simon's quantum algorithm and Shor's quantum factoring algo- 
rithms can be viewed as instances of the same generic quantum hidden subgroup algorithm for abelian groups. 
Simon's algorithm determines a hidden subgroup of the direct sum of cyclic groups of order 2. Shor's algorithm 
determines a hidden subgroup of the infinite cyclic group. 



But can the generic abelian hidden subgroup algorithm be extended to a larger class of groups? If it could be 
extended to a large enough class of non-abelian groups, then there is a strong possibility that a polynomial-time 



quantum algorithm for the graph isomorphism problem could be found in this way. (For an in depth study of 
the graph isomorphism problem, sec, for example, Hoffman. 4 For applications, see, for example, Tarjan. 19 For 
a discussion as to how to extend the quantum hidden subgroup problem to non-abelian groups, see for example 
Lomonaco. 13 ) 

But once again, we ask: 

Why has it been so difficult to create new non-abelian QHS algorithms? 

We can not give a complete answer to this question. But we can give some clues as to why non-abelian 
QHS algorithm development has been so difficult. 

3. "THE DEVIL IS IN THE DETAILS." 

"The devil is in the details." By that we mean the following: 

A number of subtleties were ignored in the above description of the generic QHS algorithm. These subtleties 
become absolutely crucial when one tries to extend the generic QHS algorithm to a larger class of non-abelian 
groups. 

There is simply not enough space to discuss all the important subtleties in regard to the generic QHS 
algorithm. So we will focus on only one, which the authors believe has been ignored by many in the research 
community. 

Contrary to conventional wisdom, Simon's and Shor's algorithms are far from the same generic QHS algorithm. 
To say so is a gross oversimplification. There are crucial differences. Shor's algorithm, unlike Simon's, outputs 
group characters which are approximations to the group characters actually sought. 

More specifically, to find a hidden subgroup of / : G — ► H, Shor's algorithm selects a "large" epimorphic 
image v : G — ► Q for "approximating" /. Crucially, Shor's algorithm also selects a "correct" transversal map 
t : Q — > G , where a transversal r : Q — ► G is an injection such that v o t = id,Q, where id,Q denotes the 
identity map on Q. 

Once the transversal r has been selected, we can define an approximation / to / by / = J* o r. We can 
now use the Fourier transform of / associated with the group Q to find the hidden subgroup of /. Thus, Shor's 
algorithm outputs random group characters of Q which are approximations to the group characters of H. 

We emphasize one key point here: 

The selection of the transversal r : Q — ► G . 

On the one hand, a good choice will produce an efficient algorithm. On the other hand, a bad choice will lead 
to an inefficient algorithm. Unfortunately, Shor's original algorithm gives no hint as to how to choose the 
transversal r : Q — ► G generically. This, of course, is only one of the difficulties encountered in trying to 
generalize Shor's algorithm to non-abelian groups. But it appears to be a crucial one that has, for the most 
part, been ignored. The significance of the correct choice of a transversal is made transparent by Lomonaco and 
Kauffman, 11 where the correct transversal for the abelian QHS algorithm is found to be what is called in their 
paper a Shor transversal. 

Another obstacle to the development of new non-abelian QHS algorithms is the time complexity of the 
non-abelian Fourier transform. 



4. THE NON-ABELIAN FOURIER TRANSFORM 



The Fourier transform on non-abelian groups is defined as follows: 

Let G be a finite non-abelian group, and let -n^ x \ ir^ , . . . , be a complete set of distinct irreducible 
representations of the group G. 

Each irreducible representation is a morphism tt^ : G — ► Aut (Wi) from G to the group of automophisms 
of the representation space Wi . Let 7rW # : G — ► Aut(W*), denote the corresponding contragradient repre- 
sentation, where W* is the dual Wi . Extend the representation 7i"W # : G — ► Aut (W*) to the group ring, i.e., 
to 7r«# : CG — > End(W*), where CG denotes the group ring of G over the complex numbers C, and where 
End (W*) denotes the ring of endomorphisms of W*. Then the non-abelian Fourier transform Tg on the group 
G is defined as 

k k 
T G = 0tt«# : CG — > @End (W*) , 

i=l i=l 

where denotes the direct sum. 

The above Fourier transform can be expressed more explicitly, but less transparently, in terms of matrices. 

The algorithmic time complexity of the non-abelian Fourier transform depends to a large extent on the 
basis chosen to express the Fourier transform in terms of matrices. But this complexity will depend on which 
transversal r : Q — ► G is chosen for the non-abelian QHS algorithm! 



5. CONCLUSION 

In this paper, we conjecture that one of the main obstacles to creating new non-abelian QHS algorithms for the 
hidden subgroup problem / : G — ► H is the correct choice for the transversal r : Q — ► G. 
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